CVE-2018-5288: Gd Rating System Project Gd Rating System

Medium severity, CVSS 6.1. EPSS: 1.4% chance of exploitation in the next 30 days.

The GD Rating System plugin 2.3 for WordPress has XSS via the wp-admin/admin.php panel parameter for the gd-rating-system-transfer page.

Affected products

• Gd Rating System Project Gd Rating System: version 2.3 only

Published 2018-01-08. Last modified 2026-06-17.